August 2013 Internet Explorer Updates

This security update resolves eleven privately reported vulnerabilities in Internet Explorer. The most severe vulnerabilities could allow remote code execution if a user views a specially-crafted Web page using Internet Explorer. An attacker who successfully exploited the most severe of these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Recommendation. Most customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

What's the matter Microsoft?… does your browser not support FREE, OPEN, HTML5 VIDEO CODECS that we've been **BEGGING** you to support BY DEFAULT, out of the box since you first announced that you would support the HTML5 VIDEO tag?

I hate to laugh but it serves you right! You talked up a bunch of bullony reasons why you weren't supporting new and open formats but guess what… that egg is all over your face!

Next time Microsoft – when we say FULLY SUPPORT DRM-FREE OPEN CODECS for the OPEN WEB… Please Flippin listen!!!!!

No, Mathew, it's because Google is being a bunch of jerks (making demands of MS that they don't make of other client developers). And that's on WP8 anyway, not Windows 8 (IE11 supports HTML5 as well as anyone).

@Mathew, Windows Phone OS supports more codec than iOS. So the problem is not with Codecs. The problem is what pmbAustin reporting.

Google is doing dirty business. First they argued that Windows Store and Windows Phone Store are not worthy markets to submit google branded apps and investing for them doesn't make sense… Investment is a big word for cross platform phone apps when freelance developers (individuals) single handedly delivering apps supported in all platforms. So when corporation like Google, (whose primary business is minting money by tracking your clicks, profile your activity and selling to higher bidders) call porting their app to other platform an investment, it means that Microsoft doesn't let them track their consumers private data which Goolge sells.

Do the mathematics, how else they are making top dollars when all the software products they have to offer are free of cost? Other company are selling stuff, while those Google jerks are profiling your activity and ripping off your privacy in the name of advertisement. Wake up! Google is NOT your friend.

Please read the link above and you will see that Google YouTube application on Android is not HTML5 neither is the one on the iPhone. The HTML5 version on you desktop is only the video and audio tags, which by the way IE 9,10, 11 have no trouble doing. Google wants the entire application in HTML5 not just the video and audio tags.

Would you look at that, IE9+ is supported. This information was really hard to look up too, took a whole 5 seconds.

The question isn't really if they can make an html5 app, they obviously could, but if they made it in html5 then it would be harder to make and end up with less features than the iphone/android apps that aren't in html5.

We've discussed #1 above at length and its obvious that Microsoft needs to learn to "eat their own dogfood" when it comes to HTML5 Video and codecs.

#2 Is the more interesting one. Did Google block Microsoft because they told Microsoft to do #1 (the HTML5 app) and since Microsoft didn't comply they don't get service? -OR- Does Google's userAgent sniffing accidentally block Windows Phone? (PS proper sniffing of Windows 8 Ex-"Metro" vs. Desktop is impossible *ExtremeSideRant*) so it wouldn't surprise me that trying to accurately detect WindowsPhone8 might be tricky -OR- is Google just sticking it to Microsoft to get back at them for something else?

It would be interesting to see if the blockage is purely due to not following the requested steps of building an HTML5 app like they were told to do.

"It is because you have your settings in desktop mode rather than mobile.

As far as I know it has always behaved like this. Youtube is assuming you have flash installed because it thinks it's a desktop environment. I don't think there is any malicious intent in this instance. Simple solution is to change to mobile in settings, the site works fine for me."

If Microsoft's "Desktop" mode of their browser "claims" to be real windows that supports an Adobe Flash player (but doesn't!) then that is MICROSOFT's FAULT! not Google's.

Switch your browser back to the mobile settings (where they should be) and carry on.

If the site(s) you visit can't handle the mobile userAgent your device sends out then contact those sites and have them fix their UA sniffing don't compound the problem by making your device try to fake what it is and what it can handle – cause it can't!

It wasn't happening 3 months ago! Something was definitely changed on YouTube server-side. Vimeo and all other HTML5 video websites work just fine in Windows Phone (IE10 mobile) and even IE9 mobile on WP7!!

and installed Visual Studio Express 2012 to get the Windows Simulator (i.e. Program FilesCommon FilesMicrosoft SharedWindows Simulator11.0Microsoft.Windows.Simulator.exe) as I wanted to test the improved touch browsing in the IE 11 preview. Unfortunately, even if I choose the touch input method from the simulator toolbar on the right, the browser still seems to produce all mouse hover events and all hover menus, tooltips, etc. on websites work as if mouse input is available when I just move the touch target circle around without even clicking to emulate a touch. This means touch browsing can actually not be tested properly in the simulator. This was not the case last time I checked the simulator on Windows 8 and IE10.

Can someone confirm this is some kind of bug and suggest a workaround?

IE11 Preview has an extremely annoying bug where the location bar (pardon me, in IE you call it the "address bar") steals the focus from the page.

I've seen it occur just after a page load… and as well when typing in a username/password causing me to type in the clear replacing the URL of the page (and sending my password to Google) as that is the default search engine triggered when I press enter (presuming I am actually logging into a web app).

Needless to say this is a majorly frustrating bug.

Since I can't use this browser with this issue not fixed I'll wait until there is a beta release for IE11.

PS To the [MSFT] staff reading on this blog feel free to file a bug in Connect (I most certainly will not)

Now I have to uninstall IE11 preview. (mainly due to the other rendering glitches, crashing and buggy dev tools etc. but the URL focus stealing is the straw that broke the camels back)

PPS Please for the love of god fix this annoying blog comment form! I should not have to submit comments multiple times (after remembering that I have to copy my comment to the clipboard FIRST!!!) This isn't rocket science! Every other blogging platform has solved this already! ONLY "Non-Community Server" has this bug! Seriously it is 2013 it is time to either fix this bug or move to a real blog platform that cares about their users!

For the last time, Stephen, take two freakin' seconds to LOG IN. You only ever have to do it once. You stay in from that point forward. And you'll NEVER have to post a comment multiple times again. You're causing your OWN pain here.

Yeah, yeah, they should fix the form blah blah blah, but why are you torturing YOURSELF in the mean-time?

Well this is frustrating. In Control Panel > Uninstall programs: Internet Explorer 11 isn't listed. (on windows 7) so I can't remove it from there.

In the "Turn Windows features on or off" there is an Internet Explorer 11 checkbox I can uncheck… but doing so removes Internet Explorer completely from my PC (e.g. typing in Start > iexplore.exe == file not found!)

So now I re-checked it to bring IE11 back… but how do I go back to IE10 or IE9?

@pmbAustin

WHY THE **** SHOULD I HAVE TO LOG IN TO USE A PUBLIC BLOG?!

WHY THE **** SHOULD A BLOG REQUIRE ME TO SIGN IN TO ****ING WORK?

WHY THE **** HASN'T MICROSOFT FIXED THE ISSUE?!

WHY THE **** HASN'T COMMUNITY SERVER FIXED THE ISSUE?!

WHY THE **** SINCE MICROSOFT KNOWS THIS ISSUE EXISTS (AS DOES pmbAustin) DO THEY NOT POST IN A MASSIVE BRIGHT BOLD MESSAGE AT THE TOP OF THE COMMENT FORM STATING THAT:

Seriously this is like a 5+ year old bug! Microsoft knows about it, every frequent commenter on this blog knows about it!, this bug on the IE Blog has been blogged about on OTHER BLOGS (that's how well known it is!), Community Server knows about this bug! The solution to fix the bug has been posted ON THE BLOG by dozens of readers!

@MICROSOFT

@Wilson Guo [MSFT],

@Michael Patten [MSFT],

@PJ Hough [MSFT],

@Sandeep Singhal [MSFT],

@Rob Mauceri [MSFT],

@Paula Chuchro [MSFT],

@Ceri Gallacher [MSFT],

@Dinesh Chandnani [MSFT],

@Matt Gradwohl [MSFT],

@Rajkumar Mohanram [MSFT],

@Dean Hachamovitch [MSFT],

@Kevin Miller [MSFT],

@Jatinder Mann [MSFT]

WHO THE **** has the FTP password for this site and WHY THE **** have they not fixed it already!?!?

Somebody has to be responsible for this blog and that person needs to stand up and do something to fix it!

This is the **only** blog I know of that just-plain-doesn't-and-never-has-worked!

@pmbAustin Did you ever get to the bottom of what was causing IE10 to spawn only one process and eventually stop rendering as the memory usage of that single process added up? I'm having the same issue with Windows 7/x64.

@Chris: "@pmbAustin Did you ever get to the bottom of what was causing IE10 to spawn only one process and eventually stop rendering as the memory usage of that single process added up? I'm having the same issue with Windows 7/x64."

No. It still happens. In fact, I saw the worst example just recently: One dozen tabs all loaded in a single process that was over 1.3 GB in size. It just seems like over time, some tabs "restart" silently, and when they restart, they reuse an existing iexplorer.exe process, until over time, they all end up in just a couple or even one. And when this happens, performance NOSEDIVES, it becomes very unresponsive, and most of the time (though not always), rendering stops… tabs will appear empty (they never redraw), common dialogs will not show icons, etc. This happens regularly. Like, once a week.

I assume that people who aren't technical and who don't use TaskManager a lot just get frustrated and switch to another browser. I don't understand why something like this is persisting across versions. It's so easy (if time-consuming) to reproduce. It happens over time, any time I have multiple tabs open and leave them open for hours or days.

I'm not sure either about the memory leak issue but I believe it may have something to do with how IE "suspends" tabs when not in issue, mentioned somewhere on another post. Correct me if I'm wrong, though.

@pmbAustin I've tried to reproduce the bug. There seem to be a number of different ways, and they all seem to relate to the bug occuring after around 60 tabs being opened (not necessarily all at once, just since at least one IE process was started).

The easiest way to explain how to reproduce the bug is as follows:

1. Close all instances of IE and verify none are left running using Process Explorer.

2. Start one new instance of IE. This will be kept running and won't be closed.

3. Start a second process e.g. by creating a new InPrivate session by right clicking the IE icon and selecting "New InPrivate Session"

4. Open 30 new tabs in the InPrivate session, using the Ctrl+T shortcut 30 times.

7. Repeat steps 3-5 once again. You should notice that IE stops spawning new processes at some point.

8. Now, as long as the original instance of IE is running, IE will not spawn any more than one child process per instance of IE. This will lead to the memory of that child process growing and eventually IE will stop rendering new tabs. Flash may also stop working.